CVE-2017-9857
Estado: ModificadaAlta (8.1)—
An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be replayed, injected, or used for a man in the middle session. All functionalities available in Sunny Explorer can effectively be done from anywhere within the network as long as an attacker gets the packet setup correctly.
Leer descripción completaMostrar menos
This includes the authentication process for all (including hidden) access levels and the changing of settings in accordance with the gained access rights. Furthermore, because the SMAdata2+ communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.69%
- Percentil entre todas las CVEs puntuadas: 51
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (39)
SMA — Sunny BOY 1.5 FirmwareSMA — Sunny BOY 2.5 FirmwareSMA — Sunny BOY 3.0 FirmwareSMA — Sunny BOY 3.6 FirmwareSMA — Sunny BOY 3000tl FirmwareSMA — Sunny BOY 3600 FirmwareSMA — Sunny BOY 3600tl FirmwareSMA — Sunny BOY 4.0 FirmwareSMA — Sunny BOY 4000tl FirmwareSMA — Sunny BOY 5.0 FirmwareSMA — Sunny BOY 5000 FirmwareSMA — Sunny BOY 5000tl FirmwareSMA — Sunny BOY Storage 2.5 FirmwareSMA — Sunny Central 1000cp XT FirmwareSMA — Sunny Central 2200 FirmwareSMA — Sunny Central 500cp XT FirmwareSMA — Sunny Central 630cp XT FirmwareSMA — Sunny Central 720cp XT FirmwareSMA — Sunny Central 760cp XT FirmwareSMA — Sunny Central 800cp XT FirmwareSMA — Sunny Central 850cp XT FirmwareSMA — Sunny Central 900cp XT FirmwareSMA — Sunny Central Storage 1000 FirmwareSMA — Sunny Central Storage 2200 FirmwareSMA — Sunny Central Storage 2500-ev FirmwareSMA — Sunny Central Storage 500 FirmwareSMA — Sunny Central Storage 630 FirmwareSMA — Sunny Central Storage 720 FirmwareSMA — Sunny Central Storage 760 FirmwareSMA — Sunny Central Storage 800 FirmwareSMA — Sunny Central Storage 850 FirmwareSMA — Sunny Central Storage 900 FirmwareSMA — Sunny Tripower 12000tl FirmwareSMA — Sunny Tripower 15000tl FirmwareSMA — Sunny Tripower 20000tl FirmwareSMA — Sunny Tripower 25000tl FirmwareSMA — Sunny Tripower 5000tl FirmwareSMA — Sunny Tripower 60 FirmwareSMA — Sunny Tripower Core1 Firmware
CWE
- CWE-287
Referencias
- http://www.sma.de/en/statement-on-cyber-security.html
- http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
- https://horusscenario.com/CVE-information/
- http://www.sma.de/en/statement-on-cyber-security.html
- http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
- https://horusscenario.com/CVE-information/
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-9857",
"cveTags": [
{
"tags": [
"disputed"
],
"sourceIdentifier": "cve@mitre.org"
}
],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2017-9857",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-04-19T15:46:55.643864Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.1,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:h:sma:sunny_tripower:5.0:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_tripower",
"versions": [
{
"status": "affected",
"version": "TL-30"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_boy_1.5",
"versions": [
{
"status": "affected",
"version": "TL-21"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2017-08-05T17:29:00.613",
"references": [
{
"url": "http://www.sma.de/en/statement-on-cyber-security.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
"source": "cve@mitre.org"
},
{
"url": "https://horusscenario.com/CVE-information/",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.sma.de/en/statement-on-cyber-security.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://horusscenario.com/CVE-information/",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be replayed, injected, or used for a man in the middle session. All functionalities available in Sunny Explorer can effectively be done from anywhere within the network as long as an attacker gets the packet setup correctly. This includes the authentication process for all (including hidden) access levels and the changing of settings in accordance with the gained access rights. Furthermore, because the SMAdata2+ communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
},
{
"lang": "es",
"value": "**EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. El protocolo de comunicación SMAdata2+ no emplea correctamente la autenticación con cifrado, por lo que es vulnerable a ataques Man-in-the-Middle, inyección de paquetes y ataques de replay. Cualquier cambio de configuración, paquete de autenticación, paquete de rastreo, etc., puede ser reproducido, inyectado o empleado para un Man-in-the-Middle. Todas las funcionalidades disponibles en Sunny Explorer pueden realizarse correctamente desde cualquier parte de la red siempre y cuando el atacante configure correctamente el paquete. Esto incluye el proceso de autenticación para todos los niveles de acceso (incluyendo aquellos que están ocultos) y el cambio de configuraciones según lo establecido por los derechos de acceso adquiridos. Además, debido al hecho de que el canal de comunicación SMAdata2+ no está cifrado, un atacante que entienda el protocolo será capaz de escuchar comunicaciones. NOTA: La posición del vendedor que la autenticación con cifrado no es requerida en una red aislada. También, únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30."
}
],
"lastModified": "2026-06-17T01:29:03.687",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E381975C-AC80-4797-9D60-21A8FEEBA71C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1A24A14C-E510-479F-86ED-050502912FE7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5E930476-4BB4-44FB-94EF-B327B7016C64"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "82E14A85-4A8F-441B-B457-39A8CB114272"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7210BF3C-EA34-4805-A596-9B818EE231F7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C37031D3-E12D-450C-9DAF-E57E70A179FF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BB8A5FD-512F-48CE-B9DB-B61228178515"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7CD72861-42E9-4DD0-A71F-91C327245A18"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "803BA76D-0221-4820-855A-8647B70AF590"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96F089F6-9A2B-4D27-94A4-2B59683C044B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F004C609-A8C6-4A69-A9CA-670D28060948"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0263729-F7F5-4F06-9845-432F248B0010"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8305C0A5-CD69-42ED-94F8-A548997ECE04"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7ABAC551-0937-4C35-B367-E082216973A5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1E6499AD-A269-4D05-9562-975C59659563"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCE97058-71A8-4594-8D1C-44EED65137FA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E999A43F-820D-4281-9393-C8641CFDCC37"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3C472660-FAF7-48FB-9190-D85EB317197E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E830DAA-4072-48C8-B047-56CA7D61C48A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "024BC798-2EC6-404E-9B2A-32F661823474"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5A48910-3876-426B-AB95-0EA5F08D4883"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "287A5EC9-69D7-452A-8667-A54D8B890A53"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14616A98-3829-41DF-BB99-011A617FA45A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2202672A-9402-4B55-95B2-0341BD216AA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C685EA76-43AE-4354-9C07-122F4D070074"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF640501-1D66-40B3-B473-B8844D7F8C62"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "60266D0B-6195-4737-A6EB-6B46B81E0616"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89052ECC-5760-4D13-B320-5860C22B52C6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AC865DBB-C763-4063-ADD9-0D230D91C591"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A8484D2-BA3E-4C87-A392-157B112D3222"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BD088AB2-1C70-4C86-A25C-05B59D566E09"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05D94A22-FF34-411B-BF12-767CE2518B8D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5D33F707-E03E-4221-A65B-DE694B7BBA85"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3785766A-5450-4AE0-BFE6-11E4D298BB36"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3809F04D-7E1E-4197-AC7A-D84A74609E33"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EC9291B-FF03-463E-A935-267E11B2AC0B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72879781-EA14-49DC-9586-E6FF3871E0E4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98D59F07-E40A-4801-B552-B8CD9B948741"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B488C87D-A594-49E1-B5D9-F951EE180304"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B282A58C-280A-48BA-B454-980B21FAE9AA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}